This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF32909AD05C11F0B6F754C1DAE4EC9C.roa File: BF32909AD05C11F0B6F754C1DAE4EC9C.roa (raw, json) Hash identifier: GMmI4UDEOMKNalw8rK/uzvFuMwW5ReLDwO3BDTn+Ges= Subject key identifier: 86:C9:67:46:E8:4D:8F:52:7F:F1:83:13:0D:3B:5E:53:B3:A9:E0:37 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC9E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF32909AD05C11F0B6F754C1DAE4EC9C.roa Signing time: Wed 03 Dec 2025 15:28:41 +0000 ROA not before: Wed 03 Dec 2025 15:28:36 +0000 ROA not after: Sun 19 Nov 2028 15:28:36 +0000 asID: 17561 IP address blocks: 154.199.0.0/24 maxlen: 24 154.199.5.0/24 maxlen: 24 154.199.6.0/24 maxlen: 24 154.199.7.0/24 maxlen: 24 154.199.8.0/24 maxlen: 24 154.199.9.0/24 maxlen: 24 154.199.10.0/24 maxlen: 24 154.199.11.0/24 maxlen: 24 154.199.12.0/24 maxlen: 24 154.199.13.0/24 maxlen: 24 154.199.18.0/24 maxlen: 24 154.199.24.0/24 maxlen: 24 154.213.168.0/24 maxlen: 24 154.213.169.0/24 maxlen: 24 154.213.170.0/24 maxlen: 24 154.213.171.0/24 maxlen: 24 154.213.172.0/24 maxlen: 24 154.213.173.0/24 maxlen: 24 154.213.174.0/24 maxlen: 24 154.213.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109726 (0x1ac9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 15:28:36 2025 GMT Not After : Nov 19 15:28:36 2028 GMT Subject: CN=69305729-d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:4b:5c:f1:cf:98:5b:6b:52:77:86:2f:50: 97:38:22:4e:ac:f0:51:2e:88:e7:dc:ab:12:30:13: 9c:03:a2:91:79:7e:db:21:62:c4:7e:e3:a7:c1:d3: 1b:d2:98:d1:a7:c6:af:91:2d:ac:9d:1a:6d:59:f6: 0a:73:32:c0:75:46:4e:18:0b:12:7d:9c:a2:05:73: b8:b4:de:ca:76:0a:34:79:2e:7a:70:80:7a:dd:7d: 8c:73:fd:a4:97:97:dd:65:8f:a0:98:a2:46:df:eb: 85:6a:02:e2:1c:e7:6c:44:ec:c1:39:8e:06:92:46: be:45:51:f4:53:66:f8:e4:9f:0b:35:ac:99:b1:ae: 63:98:0f:28:e9:78:8f:22:7c:18:0c:67:1f:4e:f6: d7:75:a8:e2:fd:bb:b8:ee:d5:dc:af:04:9a:5a:48: 20:8d:bc:bf:a6:13:f5:b8:6f:30:53:59:e7:23:c9: 00:3d:58:4e:02:0e:b3:ec:b2:94:21:fd:cb:6d:06: be:72:88:df:70:10:a3:fd:1a:9c:5b:f7:45:b7:00: ef:60:3b:bf:4f:bd:c4:59:14:73:1d:71:e0:49:33: 42:eb:ad:53:e2:04:30:4c:28:14:88:81:d1:e6:49: 5d:7c:69:7b:90:8d:06:27:b8:3c:a8:39:2f:c8:73: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C9:67:46:E8:4D:8F:52:7F:F1:83:13:0D:3B:5E:53:B3:A9:E0:37 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF32909AD05C11F0B6F754C1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.199.0.0/24 154.199.5.0-154.199.13.255 154.199.18.0/24 154.199.24.0/24 154.213.168.0/21 Signature Algorithm: sha256WithRSAEncryption 29:ce:0c:1e:76:a9:e9:fd:7d:f5:63:b7:20:88:be:72:33:a6: 71:d4:71:75:14:06:90:e3:3e:2d:32:2a:b6:df:a5:61:48:d5: 8e:3a:88:82:a5:cb:7e:d3:b3:9f:b0:2c:b4:f9:e6:63:a7:eb: c8:58:42:71:49:86:a7:e3:8f:a7:56:c3:d9:8c:52:07:57:05: c5:2d:40:0f:7b:b1:9f:60:53:1c:89:38:cc:53:b8:ec:04:1e: 51:24:43:ce:e9:36:55:95:e1:2e:71:86:1d:a3:78:7f:ec:a0: 7f:61:ff:fc:ee:ed:17:64:5d:68:fa:17:2f:1b:25:23:f1:06: a8:12:41:ab:3b:f2:82:e9:04:43:18:78:bc:71:f0:a9:15:6d: d8:fb:8f:44:4a:cc:34:60:f2:c7:da:5a:b2:58:de:9a:f9:fe: 16:80:46:9f:4c:c8:0b:62:81:11:c1:07:b2:94:78:63:1e:16: d4:1b:d6:01:fc:99:18:b7:9f:d3:3e:90:af:5b:e5:1f:9a:51: 1f:f9:3f:c3:67:f4:70:34:fb:97:59:da:73:6b:be:4f:7d:b7: d0:0f:4c:fb:c3:c0:0b:7e:c5:01:07:3e:16:52:e6:b1:d9:64: 75:39:dc:3b:17:b4:39:3d:74:5f:24:b4:df:01:94:df:32:3a: 4a:c3:43:de -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIDAayeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTUyODM2WhcNMjgxMTE5MTUyODM2WjAYMRYw FAYDVQQDEw02OTMwNTcyOS1kNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAu6xLXPHPmFtrUneGL1CXOCJOrPBRLojn3KsSMBOcA6KReX7bIWLEfuOn wdMb0pjRp8avkS2snRptWfYKczLAdUZOGAsSfZyiBXO4tN7Kdgo0eS56cIB63X2M c/2kl5fdZY+gmKJG3+uFagLiHOdsROzBOY4Gkka+RVH0U2b45J8LNayZsa5jmA8o 6XiPInwYDGcfTvbXdaji/bu47tXcrwSaWkggjby/phP1uG8wU1nnI8kAPVhOAg6z 7LKUIf3LbQa+cojfcBCj/RqcW/dFtwDvYDu/T73EWRRzHXHgSTNC661T4gQwTCgU iIHR5kldfGl7kI0GJ7g8qDkvyHMQzwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFIbJ Z0boTY9Sf/GDEw07XlOzqeA3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CRjMyOTA5QUQwNUMxMUYwQjZGNzU0QzFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmscAMAwDBACaxwUDBAGa xwwDBACaxxIDBACaxxgDBAOa1agwDQYJKoZIhvcNAQELBQADggEBACnODB52qen9 ffVjtyCIvnIzpnHUcXUUBpDjPi0yKrbfpWFI1Y46iIKly37Ts5+wLLT55mOn68hY QnFJhqfjj6dWw9mMUgdXBcUtQA97sZ9gUxyJOMxTuOwEHlEkQ87pNlWV4S5xhh2j eH/soH9h//zu7RdkXWj6Fy8bJSPxBqgSQas78oLpBEMYeLxx8KkVbdj7j0RKzDRg 8sfaWrJY3pr5/haARp9MyAtigRHBB7KUeGMeFtQb1gH8mRi3n9M+kK9b5R+aUR/5 P8Nn9HA0+5dZ2nNrvk99t9APTPvDwAt+xQEHPhZS5rHZZHU53DsXtDk9dF8ktN8B lN8yOkrDQ94= -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:04 2025 by rpki-client